Wrath (npub1q2j…crzn) DK (npub1rkc…fnl9) anime graf mays 🛰️🪐 (npub108z…dkr5) are you fucking kidding me? This shit's got script-kiddie written all over it.
The truth is that fedi software isn't that well written and this vulnerability was a HUGE oversight that should have been obvious to anyone with half a brain years ago. I suspect they even knew this when they were implementing media proxy this way from the beginning, but resolved to fix it later-- and then never did.
bajax /
npub16r…nd9ze
2023-05-26 02:20:29
in reply to nevent1q…tjms
Author Public Key
npub16rws74jzn42yjxw0jzm6pt9xqrdfjat6uge5atg2035w830n8v5sgnd9zePublished at
2023-05-26 02:20:29Event JSON
{
"id": "957d29361a629e335183b74991df1ae509e3a195ea128c9bd3f270cdfe9a7938",
"pubkey": "d0dd0f56429d544919cf90b7a0aca600da99757ae2334ead0a7c68e3c5f33b29",
"created_at": 1685067629,
"kind": 1,
"tags": [
[
"p",
"02a562e0e20eb5af11697306bb6738edc8c0478d10f8467769efacc33a261151",
"wss://relay.mostr.pub"
],
[
"p",
"1db0ca2d15b078a18b1a0b0c784ddd4036a5d3dbaf66da87bb0a6151728a765a",
"wss://relay.mostr.pub"
],
[
"p",
"79c4b3e2b1e7d8d74fa652cdc1dee37f9cd08fefdc13a79f8d1146c0b69fd1fb",
"wss://relay.mostr.pub"
],
[
"e",
"fb814d03ef8cfe3aeed005601e95031619fd89c3f8b54e4550064ce2319e45a3",
"wss://relay.mostr.pub",
"reply"
],
[
"mostr",
"https://bajax.us/objects/1c8764ad-0bb4-42da-abcd-ca7aef97ac0e"
]
],
"content": "nostr:npub1q2jk9c8zp6667ytfwvrtkeecahyvq3udzruyvamfa7kvxw3xz9gsuacrzn nostr:npub1rkcv5tg4kpu2rzc6pvx8snwagqm2t57m4and4pampfs4zu52wedqgpfnl9 nostr:npub108zt8c43ulvdwnax2txurhhr07wdprl0msf608udz9rvpd5l68ascvdkr5 are you fucking kidding me? This shit's got script-kiddie written all over it. \n\nThe truth is that fedi software isn't that well written and this vulnerability was a HUGE oversight that should have been obvious to anyone with half a brain years ago. I suspect they even knew this when they were implementing media proxy this way from the beginning, but resolved to fix it later-- and then never did.",
"sig": "e2070a0911a56665f36a98f909b02591b7547c2e530061fc8e5a9ba6e74f9bd80cb0747dca86a6441a2b76323911e19bb732a4067a5cb989681ca50160b6e3e9"
}